Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/61f398-94f6-4468-85f3-63fcaac31ca3/1/q1PsDpoFPLvg6aBxvK2eaKmcz6g.mft
File: q1PsDpoFPLvg6aBxvK2eaKmcz6g.mft (raw, json)
Hash identifier: P/ckQ1vFQe3z+SJAvx+Qf95QaTKHt2SO4Y9CAxl9mSY=
Subject key identifier: 9B:5C:7F:56:20:51:80:32:B7:4F:88:DC:69:1C:A8:A3:CB:55:5E:86
Authority key identifier: AB:53:EC:0E:9A:05:3C:BB:E0:E9:A0:71:BC:AD:9E:68:A9:9C:CF:A8
Certificate issuer: /CN=ab53ec0e9a053cbbe0e9a071bcad9e68a99ccfa8
Certificate serial: 019CA9EA93C2EC9B43BE670E8AF1D513E046
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q1PsDpoFPLvg6aBxvK2eaKmcz6g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/61f398-94f6-4468-85f3-63fcaac31ca3/1/q1PsDpoFPLvg6aBxvK2eaKmcz6g.mft
Manifest number: 1848
Signing time: Sun 01 Mar 2026 15:00:48 +0000
Manifest this update: Sun 01 Mar 2026 15:00:48 +0000
Manifest next update: Mon 02 Mar 2026 15:00:48 +0000
Files and hashes: 1: 6H1pHroW_WpI3RuJ_XZZvGns_sM.roa (hash: NhpuQWl3vvTwNJCxL4zGLvg+GHPtSA273p3r0OlIk9U=)
2: q1PsDpoFPLvg6aBxvK2eaKmcz6g.crl (hash: GtxUgnZGePFBKGV+BWnwEFjPrENyC2L7E/Ws65N/2iE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/61f398-94f6-4468-85f3-63fcaac31ca3/1/q1PsDpoFPLvg6aBxvK2eaKmcz6g.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/61f398-94f6-4468-85f3-63fcaac31ca3/1/q1PsDpoFPLvg6aBxvK2eaKmcz6g.mft
rsync://rpki.ripe.net/repository/DEFAULT/q1PsDpoFPLvg6aBxvK2eaKmcz6g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:ea:93:c2:ec:9b:43:be:67:0e:8a:f1:d5:13:e0:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab53ec0e9a053cbbe0e9a071bcad9e68a99ccfa8
Validity
Not Before: Mar 1 15:00:48 2026 GMT
Not After : Mar 2 15:00:48 2026 GMT
Subject: CN=9b5c7f5620518032b74f88dc691ca8a3cb555e86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:ee:35:b7:a6:90:7e:5f:f1:45:0c:71:e8:3b:
ee:de:80:06:d2:6f:13:a7:8f:24:8d:1f:ab:ee:32:
9a:b0:b3:84:f8:73:ee:38:13:ee:1c:9a:88:06:de:
95:d9:d9:20:6c:2e:83:73:ec:65:83:a5:c8:08:2e:
90:a7:63:68:8c:19:e8:56:29:cf:d2:34:5e:49:85:
c0:87:1e:94:27:b4:ec:b5:82:98:64:80:ef:f3:87:
dc:de:9b:70:f5:b3:b4:ed:e9:19:a7:2f:eb:0a:a4:
78:4b:55:be:43:a3:82:92:48:59:92:bd:80:df:07:
53:3f:32:d3:78:c7:ab:a2:b5:aa:f8:e2:ed:15:46:
70:90:91:36:d9:d4:38:4d:ee:69:b6:f0:81:c4:bd:
f1:a3:15:f4:ed:18:0a:97:bc:90:ed:8d:48:e0:ec:
ee:99:0f:15:c2:64:14:80:64:2e:0d:d5:46:f8:45:
9e:79:04:f2:3e:af:aa:98:b0:dd:29:a2:0e:cb:7b:
1c:d1:eb:70:43:a8:d8:fc:8f:c8:ad:54:7f:a6:b8:
bc:41:7e:0e:74:f1:2f:f8:9d:39:33:78:f9:f3:ed:
5d:1d:46:37:26:c4:b2:d1:2d:90:2b:87:6b:f6:9a:
ee:f7:b5:d9:8d:ed:2e:df:6c:bf:b4:00:38:6b:fb:
3f:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:5C:7F:56:20:51:80:32:B7:4F:88:DC:69:1C:A8:A3:CB:55:5E:86
X509v3 Authority Key Identifier:
keyid:AB:53:EC:0E:9A:05:3C:BB:E0:E9:A0:71:BC:AD:9E:68:A9:9C:CF:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q1PsDpoFPLvg6aBxvK2eaKmcz6g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/61f398-94f6-4468-85f3-63fcaac31ca3/1/q1PsDpoFPLvg6aBxvK2eaKmcz6g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/61f398-94f6-4468-85f3-63fcaac31ca3/1/q1PsDpoFPLvg6aBxvK2eaKmcz6g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:11:b3:10:4e:41:00:b0:c9:30:ea:f7:33:a6:4d:53:e7:98:
df:10:7b:ce:24:35:5d:d1:f7:4c:38:c2:2c:84:b8:4d:2f:a4:
b8:0a:7a:46:32:9c:6e:6e:60:31:9b:c1:d5:d5:f2:43:fd:15:
8b:4c:67:a4:91:58:bd:c2:ea:5c:16:bd:b4:b6:55:8a:c3:a6:
79:ec:84:b8:b7:34:96:bb:72:be:16:3c:8f:2d:5b:7a:ab:42:
4e:c5:a0:28:3a:97:24:3a:c7:fd:55:cf:f8:90:fc:73:21:c1:
cc:53:29:87:1d:c8:02:88:38:b5:03:d8:67:0c:5d:f3:ae:8c:
21:df:7c:51:bb:92:bd:7d:44:40:20:83:d9:11:51:90:48:42:
f6:b2:a7:95:72:d8:4e:12:dc:e5:a6:58:ef:64:4d:a7:4e:b4:
d1:a2:2e:4d:6b:b9:13:b0:ef:0d:20:fd:2f:ab:1b:8d:4b:db:
35:0c:13:6b:2d:54:bb:77:29:a7:b9:0b:a9:d3:19:44:35:37:
5f:00:54:74:1d:2b:f1:a9:59:e9:85:82:36:6a:a1:1a:1c:1d:
b1:da:fa:11:92:c7:dd:38:9e:31:89:30:c3:f7:04:68:7d:33:
31:aa:e1:b4:33:df:0a:bd:c9:4d:54:f5:f1:3a:ac:31:dc:52:
2e:da:34:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:15:38 2026 by rpki-client